postgresql-8.1 8.1.9-0ubuntu0.6.06 source package in Ubuntu

Changelog

postgresql-8.1 (8.1.9-0ubuntu0.6.06) dapper-security; urgency=low

  * New upstream security/bugfix release:
    - Support explicit placement of the temporary-table schema within
      search_path, and disable searching it for functions and operators.
      This is needed to allow a security-definer function to set a truly
      secure value of search_path. Without it, an unprivileged SQL user
      can use temporary objects to execute code with the privileges of
      the security-definer function (CVE-2007-2138). See "CREATE
      FUNCTION" for more information.
    - "/contrib/tsearch2" crash fixes.
    - Require "COMMIT PREPARED" to be executed in the same database as
      the transaction was prepared in.
    - Fix potential-data-corruption bug in how "VACUUM FULL" handles
      "UPDATE" chains.
    - Planner fixes, including improving outer join and bitmap scan
      selection logic.
    - Fix PANIC during enlargement of a hash index (bug introduced in
      8.1.6).
    - Fix POSIX-style timezone specs to follow new USA DST rules.

 -- Martin Pitt <email address hidden>   Mon, 23 Apr 2007 09:44:15 +0200